Lucene search
RedHatRHSA-2023:5030HistorySep 08, 2023 - 12:27 p.m.
(RHSA-2023:5030) Critical: Red Hat OpenShift GitOps security update
2023-09-0812:27:24
access.redhat.com
40
rhsa-2023 critical red hat openshift gitops argocd secrets leaked denial of service cve-2023-40029 cve-2023-40584 references unix
CVSS3
9.9
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L
EPSS
0.003
Percentile
71.9%
Security Fix(es):
-
ArgoCD: Secrets can be leaked through kubectl.kubernetes.io/last-applied-configuration (CVE-2023-40029)
-
ArgoCD: Denial of Service to Argo CD repo-server (CVE-2023-40584)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Related
redhat
redhat
(RHSA-2023:4889) Important: DevWorkspace Operator 0.22 release
2023-08-30 21:19:16
(RHSA-2023:5029) Critical: Red Hat OpenShift GitOps security update
2023-09-08 12:27:16
nessus
nessus
RHEL 9 : libxml2 (RHSA-2023:4349)
2023-08-01 00:00:00
EulerOS Virtualization 2.9.1 : libxml2 (EulerOS-SA-2023-2514)
2023-07-31 00:00:00
Fedora 38 : libxml2 (2023-a521b917c8)
2023-04-18 00:00:00
rosalinux
rosalinux
Advisory ROSA-SA-2024-2321
2024-01-09 09:53:22
Advisory ROSA-SA-2023-2319
2023-12-26 12:04:20
openvas
openvas
Huawei EulerOS: Security Advisory for libxml2 (EulerOS-SA-2023-2527)
2023-08-01 00:00:00
Huawei EulerOS: Security Advisory for libxml2 (EulerOS-SA-2023-2504)
2023-08-01 00:00:00
Huawei EulerOS: Security Advisory for libxml2 (EulerOS-SA-2023-2514)
2023-08-01 00:00:00
oraclelinux
oraclelinux
libxml2 security update
2023-08-10 00:00:00
libxml2 security update
2023-08-02 00:00:00
curl security update
2023-08-10 00:00:00
github
github
Nokogiri updates packaged libxml2 to v2.10.4 to resolve multiple CVEs
2023-04-11 21:48:01
Argo CD cluster secret might leak in cluster details page
2023-09-11 12:59:30
Argo CD repo-server Denial of Service vulnerability
2023-09-11 12:59:48
osv
osv
libxml2 vulnerabilities
2023-04-19 13:42:53
libxml2 - security update
2023-04-30 00:00:00
Moderate: libxml2 security update
2023-08-01 00:00:00
ibm
ibm
aix
aix
AIX is vulnerable to a denial of service due to libxml2
2023-07-25 11:08:32
ubuntu
ubuntu
libxml2 vulnerabilities
2023-04-19 00:00:00
libcap2 vulnerabilities
2023-06-14 00:00:00
libxml2 vulnerabilities
2023-06-07 00:00:00
fedora
fedora
[SECURITY] Fedora 38 Update: libxml2-2.10.4-1.fc38
2023-04-18 01:40:06
[SECURITY] Fedora 37 Update: libxml2-2.10.4-1.fc37
2023-04-18 01:32:12
[SECURITY] Fedora 39 Update: libcap-2.48-8.fc39
2023-11-29 01:35:51
rocky
rocky
libxml2 security update
2023-10-06 23:10:01
curl security update
2023-10-06 23:10:01
libcap security update
2023-08-24 04:20:17
redos
redos
ROS-20230616-04
2023-06-16 00:00:00
freebsd
freebsd
libxml2 -- multiple vulnerabilities
2023-04-11 00:00:00
debian
debian
[SECURITY] [DSA 5391-1] libxml2 security update
2023-04-20 20:45:49
[SECURITY] [DLA 3405-1] libxml2 security update
2023-04-30 11:00:47
cloudfoundry
cloudfoundry
USN-6028-1: libxml2 vulnerabilities | Cloud Foundry
2023-04-29 00:00:00
USN-6166-1: libcap2 vulnerabilities | Cloud Foundry
2023-06-29 00:00:00
almalinux
almalinux
Moderate: libxml2 security update
2023-08-01 00:00:00
Moderate: libxml2 security update
2023-08-08 00:00:00
Moderate: curl security update
2023-08-08 00:00:00
amazon
amazon
Medium: libxml2
2023-04-27 18:36:00
mageia
mageia
Updated libcap packages fix security vulnerability
2023-06-28 08:21:41
Updated libxml2 packages fix security vulnerability
2023-05-06 21:19:07
photon
photon
Moderate Photon OS Security Update - PHSA-2023-3.0-0569
2023-04-23 00:00:00
cvelist
cvelist
CVE-2023-40584 Denial of Service to Argo CD repo-server
2023-09-07 22:14:58
CVE-2023-40029 Cluster secret might leak in cluster details page in Argo CD
2023-09-07 22:11:56
redhatcve
redhatcve
CVE-2023-40029
2023-09-07 19:42:57
CVE-2023-40584
2023-09-07 19:42:52
prion
prion
Design/Logic Flaw
2023-09-07 23:15:00
Design/Logic Flaw
2023-09-07 23:15:00
cve
cve
CVE-2023-40029
2023-09-07 23:15:09
CVE-2023-40584
2023-09-07 23:15:10
nvd
nvd
CVE-2023-40584
2023-09-07 23:15:10
CVE-2023-40029
2023-09-07 23:15:09
veracode
veracode
Sensitive Data Exposure
2023-09-12 07:00:41
Denial Of Service
2023-09-12 07:23:15
slackware
slackware
[slackware-security] libxml2
2023-12-10 01:15:09
CVSS3
9.9
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L
EPSS
0.003
Percentile
71.9%
Related for RHSA-2023:5030